Privacy Policy
Introduction
The Australian Agricultural Data Exchange (AADX) is a program of Charles Sturt University (Charles Sturt), delivered through CSU AgriPark. This policy explains how Charles Sturt collects, uses, stores and protects personal information in connection with the AADX website, the AADX platform and AADX programs and events.
Personal information collected through the AADX is managed in line with the Charles Sturt University Privacy Management Plan, which applies to all personal information held by the University.
1. Our privacy obligations
Charles Sturt is a NSW public sector agency. We manage personal information in line with:
- the Privacy and Personal Information Protection Act 1998 (NSW)
- the Health Records and Information Privacy Act 2002 (NSW)
- the Privacy Act 1988 (Cth), where it applies
- the State Records Act 1998 (NSW)
- the EU General Data Protection Regulation (GDPR), where it applies
2. What personal information we collect
The information we collect depends on how you engage with the AADX. It may include:
- your name and contact details (such as email address, phone number and postal address)
- your organisation, role and general information about your business
- account and login details if you register to use the AADX platform
- details you provide when registering for events, such as dietary requirements
- information you provide when you contact us, subscribe to updates or take part in a project, workshop or survey
We do not generally collect sensitive information (such as information about racial or ethnic origin, political opinions, religious beliefs, trade union membership, health or sexual activities). If we need to, we will explain why, collect it only with your consent or where required by law, and use it only for the purpose it was provided.
Where practicable, you can make a general enquiry without identifying yourself.
3. How we collect personal information
We usually collect personal information directly from you, for example when you:
- contact us by email, phone or in person
- complete a form on our website
- register for or use the AADX platform
- subscribe to our newsletter or updates
- register for or attend an event or workshop
- take part in a project, pilot or consultation
Sometimes we may collect information from third parties, such as event registration services or project partners, or from publicly available sources.
4. Website information and cookies
When you visit our website, we may automatically collect information through server logs and cookies, including:
- your IP address and the server you accessed the site from
- the date and time of your visit
- pages viewed and documents downloaded
- your browser type
- the previous site you visited
We use this information to understand how the website is used, fix problems and improve our services. It may be published only in aggregated, de-identified form.
A cookie is a small file stored on your device to identify you as a visitor. You can turn off cookies in your browser settings, but some parts of the website or platform may not work properly if you do.
5. How we use personal information
We use personal information to:
- provide access to the AADX platform and manage user accounts
- respond to enquiries and provide support
- deliver AADX programs, projects, events and workshops
- send updates and information about the AADX, where you have agreed to receive them
- improve the AADX website, platform and services
- meet our legal obligations
We will only use your information for the purpose it was collected, a directly related purpose, with your consent, or as otherwise permitted or required by law.
You can ask to stop receiving updates at any time by using the unsubscribe link in our emails or contacting us.
6. Data shared through the AADX platform
This policy covers personal information. Datasets, models and other data shared through the AADX platform are managed under the terms and permissions agreed when that data is published or shared. Data owners keep control over who can access their data and on what terms.
7. Disclosure of personal information
We will not disclose your personal information unless:
- you have consented
- the disclosure is directly related to the purpose it was collected for and you would reasonably expect it
- it is required or authorised by law
We may share personal information with authorised Charles Sturt staff, and with service providers who help us run the AADX, such as website, hosting, cloud and event services. Some service providers may store information outside NSW or Australia. Where this happens, we require them by contract to protect personal information in line with NSW privacy law.
8. Storage and security
We take reasonable steps to protect personal information from misuse, loss, and unauthorised access, change or disclosure. Access to personal information is limited to authorised people for legitimate purposes.
We keep personal information only as long as needed and in line with the State Records Act 1998 (NSW), then dispose of it securely.
No method of transmitting information over the internet is completely secure. If you prefer not to send information through our website, you can contact us by phone or post.
9. Access and correction
You can ask to access the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete or misleading. In some circumstances you may also ask us to delete it. There is no charge for these requests.
If we cannot give you access or make a correction, we will tell you why in writing and explain how you can make a complaint.
Send requests to the Charles Sturt Privacy Officer at informationintegrity@csu.edu.au.
10. Questions and complaints
If you have a question or concern about how we have handled your personal information, contact us first at aadx@csu.edu.au, or the Charles Sturt Privacy Officer at informationintegrity@csu.edu.au.
You can also apply in writing to the Privacy Officer for an internal review. Applications should be made within six months of becoming aware of the conduct, and reviews are usually completed within 30 days.
If you are not satisfied with the outcome, you can:
- apply to the NSW Civil and Administrative Tribunal (NCAT) within 28 days, or
- make a complaint to the NSW Information and Privacy Commission (www.ipc.nsw.gov.au)
11. Data breaches
If a data breach involving your personal information is likely to cause you serious harm, Charles Sturt will notify you and the NSW Privacy Commissioner, in line with the NSW Mandatory Notification of Data Breach scheme.
12. Changes to this policy
We may update this policy from time to time. The current version will always be published on this page.
13. Contact us
Australian Agricultural Data Exchange
CSU AgriPark, Charles Sturt University
Boorooma Street, Wagga Wagga NSW 2650
Email: aadx@csu.edu.au
Charles Sturt University Privacy Officer
Email: informationintegrity@csu.edu.au
Charles Sturt University ABN 83 878 708 551
Change history
| Version | Date | Amendment |
|---|---|---|
| 3 | October 2026 | Updated to reflect Charles Sturt University as operator of the AADX and to align with the Charles Sturt Privacy Management Plan |
